featured image 198
featured image 198

Pharma Giants Hit by Major Data Breach

In a recent data breach incident, more than a dozen major pharmaceutical companies have been affected by the breach of US drug wholesaler Cencora. This $250-billion firm, formerly known as AmerisourceBergen, has partnerships with big pharma dealers like GlaxoSmithKline, Novartis, Genentech, Bayer, Regeneron, and Bristol Myers Squibb. Personal information such as first names, last names, addresses, dates of birth, health diagnoses, medications, and prescriptions were compromised in the breach. Although there is no evidence of public disclosure or fraudulent use of the stolen information, affected individuals are urged to take necessary steps to protect themselves.

Google Chrome Vulnerabilities and Other Critical Exploits

Google recently patched a high-severity type confusion flaw in the V8 JavaScript engine, marking the eighth zero-day exploit fixed by the tech giant this year. Other critical vulnerabilities include flaws in AutomationDirect Productivity PLCs, LCDS LAquis SCADA, and VMware storage controllers. These vulnerabilities could lead to remote code execution, denial of service, and out-of-bounds read/write vulnerabilities that pose serious security risks.

US Water Systems at Risk of Cyber Attacks

A recent report by the Environmental Protection Agency (EPA) revealed that more than 70 percent of US water systems fail to meet security standards, with default passwords and single logins being common security flaws. Cyber attacks against community water systems are on the rise, with threats from foreign adversaries like Russia, China, and Iran targeting vulnerable systems. The EPA, FBI, and US Cybersecurity and Infrastructure Security Agency (CISA) recommend water system owners take immediate action to secure their systems and protect consumers from potential cyber threats.

In conclusion, the increasing frequency and severity of cyber attacks on major companies and critical infrastructure highlight the urgent need for enhanced cybersecurity measures to protect personal and sensitive information from malicious actors. Stay informed and vigilant to safeguard against potential data breaches and security vulnerabilities.